PAGCOR Casino KYC in the Philippines: What You Upload and When
Quick answer: a PAGCOR-licensed platform checks your identity twice — lightly when you register, properly before any money leaves. PAGCOR's rules for licensed online operators require the platform to "have the technology to verify the identity of registrants for Know-Your-Customer (KYC) purposes," and state that "verification must at least be present prior to account withdrawal of a player." Budget for one valid photo-bearing government ID, nine specific personal details, and a live check that ties your face to that ID.
Key facts
- The minimum age is 21, taken from the birth date on your ID rather than a tickbox — Section 6.B of PAGCOR's *Implementing Rules and Guidelines for the Licensing of Online Poker Operators and its Platforms* (Rev. 0, effective 23 March 2023).
- Registration must capture nine data fields, including nature of work, employer and source of funds (Section 6.E.i of the same rules).
- Operators may run an account tiering system, and "only fully-verified accounts should be allowed to fully access the platform and the player's account" (Section 6.E.x).
- Video calling is expressly allowed to confirm your identity and ID card before an account is confirmed (Section 6.E.x).
- No regulator publishes a turnaround time. We searched PAGCOR's online-operator rules, its e-Games regulatory manual and its AML guidelines for casinos and found no service level for how quickly verification must finish.
This page is about the mechanics — the sequence, the paperwork, the rejections. If you want the law that makes any of it necessary, our explainer on why legal casinos make you verify your ID covers RA 10927 and the anti-money-laundering duties behind the upload screen.
Two Checkpoints, Not One
Filipino players routinely describe verification as a single event. It is two, and confusing them is why a payout can stall on an account that "already passed KYC" months ago.
Checkpoint one, at registration. PAGCOR's AML/CFT Guidelines for Casinos, Regulatory Order RO-2020-03-001 of 16 March 2020, apply to "all casinos, including internet- and ship-based casinos." They list, as a trigger for customer due diligence, the moment "a customer creates an online gaming account for the internet-based casino." Opening the account is itself the trigger — no peso amount required.
Checkpoint two, before payout. Section 2 of the online-operator rules is blunt about timing: verification "must at least be present prior to account withdrawal of a player." The word *at least* is doing real work there. It sets a floor, not a ceiling — an operator is free to demand the full check earlier, and many do at first deposit.
RO-2020-03-001 also allows a platform to finish verifying you *after* you have started, but only on conditions: that it happens "as soon as reasonably practicable," that delaying would disrupt normal business, and that money-laundering risks "are effectively managed." That is the regulatory basis for letting you deposit and play on a half-verified account. It is also why that arrangement ends abruptly at the cashier.
The Nine Things Registration Has to Capture
Section 6.E.i requires the registration flow to collect your full name, date and place of birth, present address, permanent address, contact number, nationality, nature of work or occupation, name of employer or business, source of funds, and a specimen signature.
Two of those surprise people. Occupation and employer are not marketing questions — they feed the operator's risk scoring. Source of funds is the one that later grows teeth: if your play pattern stops matching the answer you gave at signup, the platform can come back and ask you to evidence it. Our separate guide on proof of income and source-of-funds requests covers that deeper review, which is a different animal from the identity check described here.
Section 6.E.iv adds account authentication "via email and/or mobile number verification." And Section 6.E.vi requires the platform to be capable of excluding "persons listed in PAGCOR's National Database of Restricted Persons" — the NDRP. Registration is also where you declare, under Section 6.E.vii, that you are at least 21 and not among those disqualified by law from gambling, "such as but not limited to, public officials, members of the Philippine National Police and the Armed Forces of the Philippines."
Those declarations are checked, not merely collected. If you are on the NDRP because you asked to be — through the PAGCOR self-exclusion system — a compliant platform is supposed to stop you at the door. If you are a government employee, the separate ban on public officials gambling applies regardless of how the registration form treats your answer.
Which IDs Count
Section 6.E.ii of the online-operator rules asks for "a copy of one valid photo-bearing government-issued ID," and names examples: Driver's License, Passport, SSS, TIN ID, Postal ID, Voter's ID, UMID, National ID. One is the regulatory minimum. Operators may ask for more.
| Document | Status under the rules | Practical note |
|---|---|---|
| PhilID / National ID | Named in Section 6.E.ii | Carries name, birth date and photo in one place; the cleanest single upload |
| Passport | Named | Highest-quality photo page; useful when your name appears differently elsewhere |
| Driver's License, UMID, SSS, TIN, Postal, Voter's ID | Named | Any one satisfies the minimum, if unexpired and legible |
| Second government ID | Not required online, but PAGCOR's *Gaming Site Regulatory Manual for Electronic Games* v3.0 requires two at physical e-Games venues | Worth having ready; some online platforms mirror the stricter standard |
| Proof of address | Not named in Section 6.E.ii | Commonly requested anyway; a bank statement usually substitutes for a utility bill in someone else's name |
That e-Games manual is a rule for land-based venues, not online play — we mention it because it shows the stricter end of what PAGCOR considers reasonable, and because some online operators simply adopt it.
Tiering: Why You Can Deposit but Not Cash Out
The single most useful clause for a stuck player is Section 6.E.x. It permits an operator to run "an account tiering system," allows "video calling ... to fully-verify and confirm the identity, the submitted information, and ID card of the player prior to confirmation of his/her account," and then draws the line: "only fully-verified accounts should be allowed to fully access the platform and the player's account."
Read that as a straight answer to the most common complaint on Philippine gambling forums. Money going *in* is a low-risk transaction, so a partly-verified tier can deposit. Money going *out* is the regulated event, so it waits for full verification. Nothing has gone wrong with your account; you are simply on a tier that was never allowed to withdraw.
The video call catches people off guard too. It is not a scam signal — it is written into the rules as an acceptable way to confirm your ID before the account is confirmed. What *is* a signal: who is asking. Section 6.G says "only the online poker platform, and not any payment systems/channels/solutions or money transfer service, may perform the Player Registration System." Verification belongs to the operator, inside its own app or portal. A "verification agent" contacting you on Messenger or Telegram is outside that rule entirely, and our guide to spotting a genuine PAGCOR-licensed casino is worth reading before you send a document anywhere.
Separately, Section 7.A requires ongoing login verification — a password, biometrics (facial, fingerprint or iris), or a one-time PIN. That is session security, not KYC, and passing it does not mean your account is fully verified.
The Checkpoint on the Wallet Side
Here is the failure almost nobody plans for: your casino KYC completes, and the payout still will not land, because your e-wallet is the bottleneck.
GCash publishes its tiers openly. A Basic profile can Pay Bills, Buy Load, Cash In and Scan to Pay. Send Money, Bank Transfer and Pay Online only unlock once you are Fully Verified. The published limits matter even more:
| GCash profile | Wallet limit (any time) | Incoming per month |
|---|---|---|
| Basic | ₱10,000 | ₱5,000 |
| Fully Verified | ₱100,000 | ₱100,000 |
Those figures are from the GCash Help Center's own "What are my GCash wallet and transaction limits?" page, and GCash notes that limits reset on the first day of the next month rather than rolling. A ₱12,000 payout into a Basic wallet has nowhere to go — it exceeds both the monthly incoming ceiling and the wallet cap, and no amount of casino-side verification changes that. Get the wallet Fully Verified before you get the casino verified. Our GCash verification and limits guide walks through the upgrade.
How Long It Takes: The Number Nobody Publishes
We looked for an official answer and did not find one. PAGCOR's online-operator rules, its e-Games regulatory manual and RO-2020-03-001 contain deadlines for plenty of things — reporting, dispute handling, remittance — and none for how long a player's identity verification may take. There is no PAGCOR service level on KYC turnaround.
Operator help pages were not much better from where we sit. The published portals of the larger PAGCOR-licensed brands return an access restriction to visitors outside the Philippines, so we could not verify a single operator's stated turnaround from the operator's own page. Figures circulating on third-party guides — "24 to 48 hours" is the usual one — are not something we can attribute to a licensee, so we are not repeating them as fact.
What that means for you, practically:
- Treat any timeframe you are quoted as the operator's promise, not a regulator's rule. Get it in writing from support so you have something to hold them to.
- A clean, complete first submission is the only lever you control. Every re-upload restarts a manual review queue.
- Slow is not the same as stolen. But slow with no explanation, past a deadline the operator itself set, is worth escalating.
Why Verifications Get Rejected
Rejections are overwhelmingly clerical rather than suspicious. The recurring ones:
- Name mismatch. The name on the ID, the name on the casino profile, and the name registered to the GCash or Maya account must agree. Maiden names, missing middle initials, and nicknames on the wallet are the classic three.
- Unreadable capture. Glare across the hologram, a cropped edge, a finger over the ID number. Photograph the document flat, in daylight, without flash.
- Expired document. "Valid" in Section 6.E.ii means currently valid. An expired licence is not a valid ID.
- Details that contradict registration. The address or birth date you typed must match what the document says. Correct the profile rather than re-uploading the same document.
- A disqualifying status. Under 21, on the NDRP, or in a barred category — those do not resolve with a better photo, and no legitimate route exists around them.
On that last point, plainly: this page does not offer methods for passing verification with someone else's documents, for a person under 21, or for anyone on the restricted-persons database. Those are not loopholes, they are the reason the check exists, and a site advertising that it will skip them has told you it is not licensed.
If Yours Is Stuck
Order matters more than volume of messages.
- Confirm which tier you are on, not just whether "KYC is done." Ask support directly whether your account is fully verified for withdrawal.
- Ask for the specific defect in writing. "Rejected" is not actionable; "ID number not legible" is.
- Fix the wallet in parallel. Casino-side and GCash-side verification are independent queues; running them at the same time saves days.
- Upload only through the platform's own portal. Section 6.G puts registration and verification with the operator; anything happening in a private chat is outside the rules.
- Escalate on a written deadline. If a licensed operator sits on a complete submission, that becomes a regulatory matter — our walkthrough on filing a PAGCOR complaint over a delayed withdrawal covers what to document. If the account has been locked rather than merely queued, what to do about a frozen casino account is the closer fit.
What This Process Cannot Do for You
Verification protects the system before it protects you, and it is worth being clear about the costs.
It is slow with no guaranteed end date, because no regulator has set one. It is intrusive — Section 6.E.i requires your employer and source of funds, which is more than an entertainment account strictly needs to know. It does not make a platform trustworthy: passing KYC at an unlicensed site means you have handed your PhilID to strangers with no regulator behind them, which is worse than not verifying at all. And it does not speed up your first withdrawal on its own; it only removes one of the reasons a withdrawal stalls.
What you get in exchange is a payout that a regulator can be pulled into. Under Republic Act No. 10927, approved on 14 July 2017, casinos — expressly including "internet and ship-based casinos" — became covered persons under the Anti-Money Laundering Act. That is the same law that produces the paperwork and the same status that gives you somewhere to complain. Anonymous sites remove both halves at once.
Do the verification early, right after you register, rather than discovering it exists on the day you finally win. For the mechanics once you are cleared, see how to withdraw your winnings.
Play only if you are 21 or over. A verification hold is a reason to step away from the app while you wait, not to keep playing — the responsible gambling page lists the support available in the Philippines.